Unmasking Hidden Backdoors: How I Traced a Webshell Dropper in a PHP AppDiscover how I uncovered a hidden SSI-based webshell dropper planted in a PHP application. Step-by-step investigation.5 min read路zalparus.hashnode.devSep 23, 2025
Tryhackme Smol Challenge ( Medium level CTF)Smol is a vulnerable WordPress application with outdated plugins connected to it. The first step in solving a CTF is to usually read the description thoroughly. In order to have an idea of how to effectively walkthrough. This is the description. Fro...3 min read路zalparus.hashnode.devSep 20, 2025
How i was able to exploit a vulnerable payment system.Hello hackers and security enthusiasts, we are here again to serve you dinner in a 5-star hotel 馃槉. Hope you enjoy it !!!. LITTLE BIO ABOUT ME I鈥檓 David, a software developer and cybersecurity researcher who specializes in application security. I spe...2 min read路zalparus.hashnode.dev1TJun 3, 2025
How i was able to abuse XML-RPC to get Origin IP.What is XML-RPC XML-RPC stands for "XML Remote Procedure Call". It鈥檚 a protocol that allows software running on different operating systems or written in different programming languages to make procedure calls over a network (usually HTTP). How it wo...2 min read路zalparus.hashnode.devMay 17, 2025
JWT misconfiguration and PII sensitive information leakHi guys, Its David again, your favorite software developer and Security Researcher. I am back again with another report for you. Like i promised, i would make sure to be documenting all my bug findings. Had a busy week, so i utilized the weekend to m...3 min read路zalparus.hashnode.devMay 5, 2025
